Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/PxdH-lcCvcCdXMatvM4JuOKA0dI.roa
File: PxdH-lcCvcCdXMatvM4JuOKA0dI.roa (raw, json)
Hash identifier: TBFrumP+WNFO9rGVY9MrLAIMz+xLYSpgeNn3LqRO3PA=
Subject key identifier: 3F:17:47:FA:57:02:BD:C0:9D:5C:C6:AD:BC:CE:09:B8:E2:80:D1:D2
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 0183CB0654D21B545ADBA28E8BA831B2381C
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/PxdH-lcCvcCdXMatvM4JuOKA0dI.roa
Signing time: Wed 12 Oct 2022 07:08:53 +0000
ROA not before: Wed 12 Oct 2022 07:08:53 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 60721
IP address blocks: 79.110.50.0/24 maxlen: 24
109.206.239.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:cb:06:54:d2:1b:54:5a:db:a2:8e:8b:a8:31:b2:38:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Oct 12 07:08:53 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3f1747fa5702bdc09d5cc6adbcce09b8e280d1d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:89:93:0c:62:6d:6d:44:25:60:9b:bb:95:8b:
b6:6a:bf:7c:60:61:7c:71:5f:4f:9e:64:6a:43:41:
c2:8c:37:38:6d:e2:c5:7b:ec:5a:d6:99:6a:7c:20:
e7:8a:f1:8e:7e:1d:b6:96:5d:b0:d6:69:23:9d:e5:
80:11:d7:e3:39:8d:7a:af:f5:d0:12:66:98:75:7b:
25:60:b2:ae:72:31:2b:25:ae:e2:3e:91:a1:73:72:
00:b3:a9:63:c9:50:3b:4e:95:58:97:3d:7a:28:fc:
e5:70:45:33:e5:e6:36:66:22:13:05:15:fe:11:aa:
f2:92:5d:d5:8f:0f:44:1a:e1:cf:7b:8b:2c:eb:8e:
fe:9a:d1:55:01:ee:72:d4:6e:f4:fe:f0:17:4e:a2:
77:40:af:e3:2a:27:e6:aa:49:f6:29:e0:4e:98:7c:
cb:9c:a8:22:d1:ac:80:99:80:7f:79:4c:e6:f0:54:
e7:13:da:89:92:48:44:4d:fb:45:21:38:8e:8f:c0:
43:ec:75:57:dc:73:43:75:7e:b5:1e:e2:b6:a3:2b:
ff:52:b9:9f:89:29:90:62:10:c1:ec:db:37:f6:52:
4a:19:47:40:f6:10:f0:f3:26:f3:a7:1d:b9:f1:b4:
e9:ca:1c:8a:93:63:3a:7f:4b:4d:20:e7:12:d8:cd:
ba:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:17:47:FA:57:02:BD:C0:9D:5C:C6:AD:BC:CE:09:B8:E2:80:D1:D2
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/PxdH-lcCvcCdXMatvM4JuOKA0dI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.110.50.0/24
109.206.239.0/24
Signature Algorithm: sha256WithRSAEncryption
31:4c:b4:24:20:d6:53:2a:ff:42:fe:bc:19:79:26:6c:bd:4c:
c0:38:9d:5f:4a:3a:e5:64:9b:77:c0:88:90:b8:e0:b0:5f:a5:
5c:97:48:fd:87:44:ed:db:78:da:65:0b:2c:8d:38:c5:98:f4:
30:15:09:68:db:80:84:42:e0:66:6a:ba:04:ed:66:72:f5:49:
f3:b4:5b:be:a9:20:d6:54:2c:46:83:44:f8:4a:9e:1c:66:e0:
07:c1:11:2f:72:98:3c:a8:02:c9:71:5d:bb:98:ba:bc:e8:5d:
5a:81:ad:8d:c2:6b:8c:bb:16:18:c3:1e:f0:60:5a:86:e3:ed:
00:09:f3:80:2c:78:2d:a8:13:7d:ce:9f:6f:c3:d2:a4:a0:d9:
6e:cc:02:47:34:61:03:e9:f9:b4:29:3f:df:dd:6e:37:db:4f:
cd:89:bf:1e:a7:0b:d3:e4:67:a0:22:a7:4f:e6:38:bb:a0:53:
d3:f7:c9:5e:75:a0:30:8c:58:94:f3:e8:4d:0c:dd:14:cf:77:
d9:ca:af:52:19:52:08:76:f6:df:92:bb:16:eb:80:71:5b:73:
12:ad:b8:46:27:45:e9:13:6d:04:14:cb:91:58:36:64:16:8c:
9c:8d:29:b9:8e:aa:17:e8:39:49:96:48:9a:22:84:9d:3f:2f:
4a:46:b5:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:50:32 2024 by rpki-client on console-ams.rpki-client.org